$ rpki-client -vvf rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft File: LS4sVp1LY5ln5litXEl8MxqriF8.mft (raw, json) Hash identifier: t/0MO8QTOep4fK9zgZhsAB4zme4Vf+4kOR0IkPLqEdc= Subject key identifier: F7:DE:2D:02:E0:F6:1D:66:1B:B6:E5:27:E7:58:A7:02:52:0C:07:1B Authority key identifier: 2D:2E:2C:56:9D:4B:63:99:67:E6:58:AD:5C:49:7C:33:1A:AB:88:5F Certificate issuer: /CN=A9123431/serialNumber=2D2E2C569D4B639967E658AD5C497C331AAB885F Certificate serial: 01B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LS4sVp1LY5ln5litXEl8MxqriF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft Manifest number: 01B3 Signing time: Fri 13 Jun 2025 02:09:42 +0000 Manifest this update: Fri 13 Jun 2025 02:09:41 +0000 Manifest next update: Fri 20 Jun 2025 02:09:41 +0000 Files and hashes: 1: LS4sVp1LY5ln5litXEl8MxqriF8.crl (hash: zPRVbegA5TvrcVjzl26aYC6brhkUbRi7rHI0y2V5DP0=) 2: A7B59636ACCB11EDA8DAFF4AC4F9AE02.roa (hash: R2fgHMU976+Qe8LJMOcQoSeVupcwkHm/BpOIqV/u37U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.crl rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LS4sVp1LY5ln5litXEl8MxqriF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:09:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123431, serialNumber=2D2E2C569D4B639967E658AD5C497C331AAB885F Validity Not Before: Jun 13 02:09:41 2025 GMT Not After : Jun 20 02:09:41 2025 GMT Subject: CN=684b8865-928e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:95:4f:e4:4b:6b:f7:42:da:3c:29:21:a1:db: f9:88:e5:70:cc:6b:7b:3e:a7:85:d7:8a:63:2a:2f: 4d:25:47:45:ed:08:8c:1b:d8:8a:92:16:6e:fb:56: 6b:e3:5e:80:ba:f2:80:92:05:10:01:f6:73:27:ce: ec:28:cd:d0:4d:8e:7c:c1:cd:fa:e1:5d:9c:79:07: c1:a1:51:62:ef:f4:89:10:4b:db:d9:ea:34:d4:06: 49:ac:c5:8b:ee:63:bb:34:7e:e1:1e:d8:66:04:8d: 62:8f:ed:71:4c:77:29:70:79:ab:6a:cc:25:03:be: c7:f6:7a:03:c1:98:d0:39:0b:e7:b6:90:07:09:76: 1d:bb:fd:4e:24:c5:91:22:9b:67:f8:94:fe:ce:d7: 3d:41:50:bc:ea:70:20:48:6f:7e:05:88:47:ed:22: 1e:f0:ed:a8:81:7b:53:b4:14:68:3c:00:8a:a9:d9: 1f:03:91:a5:a7:a6:c0:a8:32:42:3c:bf:22:ef:05: 9f:ef:79:a1:a9:d2:33:c7:78:f2:e9:a7:7a:48:5c: 70:49:78:91:d3:90:b8:f4:f8:9b:a4:a4:3c:9e:31: 99:bf:83:dd:c0:e6:60:56:24:60:42:39:c9:a9:d4: 6e:5b:ba:1a:9a:4a:75:d6:d3:ef:6a:39:32:9f:63: 40:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:DE:2D:02:E0:F6:1D:66:1B:B6:E5:27:E7:58:A7:02:52:0C:07:1B X509v3 Authority Key Identifier: keyid:2D:2E:2C:56:9D:4B:63:99:67:E6:58:AD:5C:49:7C:33:1A:AB:88:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LS4sVp1LY5ln5litXEl8MxqriF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:31:cb:30:40:d5:c5:d1:23:82:98:9f:2c:99:f1:23:cc:52: 66:e4:bc:b6:50:2b:ef:8a:10:13:7e:44:77:9c:17:9e:19:0e: 4d:53:fd:51:20:2c:3f:d1:5a:e5:f2:52:67:b0:01:0e:7e:74: 99:54:23:44:b5:10:93:07:0a:90:a2:d2:31:34:d0:bc:9e:58: f0:17:5b:97:b0:f2:2d:28:d3:ab:a6:14:86:ab:ff:83:28:5c: f0:20:ef:2f:ea:21:f3:89:bf:98:1b:dc:eb:b2:17:8d:2c:f3: d2:f1:dc:d4:95:1c:36:df:b4:ce:c5:22:5a:43:7c:dc:3d:ec: eb:91:cc:60:2b:db:bd:18:6d:5f:fe:de:8d:7e:9c:9c:c3:62: 91:8b:67:b9:ef:b5:1a:ef:b1:76:6b:85:d6:3b:f8:98:ea:42: 66:4a:91:9c:d7:09:48:8b:a3:11:2a:4f:9c:f9:75:e2:b8:eb: 36:b4:e9:f6:17:27:20:ad:a3:c3:ff:97:70:d9:93:fc:d2:80: ea:2d:5f:66:16:2f:1f:aa:dd:6b:e9:12:5f:0c:05:c0:54:92: c1:8b:78:24:74:a1:55:f4:b1:dd:4a:af:e5:47:86:48:de:e3: d4:ad:20:85:99:05:ec:85:f6:a6:39:c3:a7:11:16:eb:13:c2: a8:aa:b5:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM0MzExMTAvBgNVBAUTKDJEMkUyQzU2OUQ0QjYzOTk2N0U2NThBRDVDNDk3QzMz MUFBQjg4NUYwHhcNMjUwNjEzMDIwOTQxWhcNMjUwNjIwMDIwOTQxWjAYMRYwFAYD VQQDEw02ODRiODg2NS05MjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3JVP5Etr90LaPCkhodv5iOVwzGt7PqeF14pjKi9NJUdF7QiMG9iKkhZu+1Zr 416AuvKAkgUQAfZzJ87sKM3QTY58wc364V2ceQfBoVFi7/SJEEvb2eo01AZJrMWL 7mO7NH7hHthmBI1ij+1xTHcpcHmraswlA77H9noDwZjQOQvntpAHCXYdu/1OJMWR Iptn+JT+ztc9QVC86nAgSG9+BYhH7SIe8O2ogXtTtBRoPACKqdkfA5Glp6bAqDJC PL8i7wWf73mhqdIzx3jy6ad6SFxwSXiR05C49PibpKQ8njGZv4PdwOZgViRgQjnJ qdRuW7oamkp11tPvajkyn2NAbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfeLQLg 9h1mG7blJ+dYpwJSDAcbMB8GA1UdIwQYMBaAFC0uLFadS2OZZ+ZYrVxJfDMaq4hf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzQzMS9DMTdCN0M2NEFD QzMxMUVEOEVDNDIxMTFDNEY5QUUwMi9MUzRzVnAxTFk1bG41bGl0WEVsOE14cXJp RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xTNHNWcDFMWTVsbjVsaXRYRWw4TXhxcmlGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzQzMS9DMTdCN0M2NEFDQzMxMUVEOEVDNDIxMTFDNEY5QUUwMi9MUzRzVnAxTFk1 bG41bGl0WEVsOE14cXJpRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrMcswQNXF0SOCmJ8smfEjzFJm5Ly2UCvvihATfkR3nBeeGQ5NU/1R ICw/0Vrl8lJnsAEOfnSZVCNEtRCTBwqQotIxNNC8nljwF1uXsPItKNOrphSGq/+D KFzwIO8v6iHzib+YG9zrsheNLPPS8dzUlRw237TOxSJaQ3zcPezrkcxgK9u9GG1f /t6Nfpycw2KRi2e577Ua77F2a4XWO/iY6kJmSpGc1wlIi6MRKk+c+XXiuOs2tOn2 FycgraPD/5dw2ZP80oDqLV9mFi8fqt1r6RJfDAXAVJLBi3gkdKFV9LHdSq/lR4ZI 3uPUrSCFmQXshfamOcOnERbrE8KoqrVu -----END CERTIFICATE-----Generated at Sat Jun 14 19:33:55 2025 by rpki-client